Skills/ClawHub/ai-shifu-course-creator

ai-shifu-course-creator@2.1.2

CAUTION

Publisher claims: "Create, edit, review, publish, manage, or analyze AI-Shifu (AI师傅) courses and their Teaching Prompts and Course Prompts in MarkdownFlow (MDF). Use for course materials, lesson design, interactions, course memory, images, deployment, platform administration, learner progress, learner profile distributions, orders, revenue, and credit-consumption questions." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher heshaofu2 · joined 2 days agoInstalls 3,045Last detonated 31 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsAGENTS.md:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/profile_store.py:414 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/shifu-cli.py:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Destructive file system command detectedscripts/image_preparation.py:3 · Destructive file system command detected
AST05
CRITICAL
Access to sensitive file pathsscripts/shifu-cli.py:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/profile_store.py:376 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionreferences/cli/cli-reference.md:230 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathsreferences/cli/cli-reference.md:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsreferences/cli/cli-reference.md:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/shifu-cli.py:114 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Authorization escalation languagereferences/cli/cli-reference.md:76 · Authorization escalation language
AST01
HIGH
Python subprocess execution detectedscripts/skill_update_check.py:441 · Python subprocess execution detected
AST05
MEDIUM
File type combined with upload actionAGENTS.md:20 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathsscripts/shifu-cli.py:126 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionreferences/cli/cli-reference.md:91 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cli/course-directory-spec.md:29 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/image-authoring.md:51 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cli/course-directory-spec.md:35 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cli/course-directory-spec.md:65 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cli/course-directory-spec.md:32 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/cli/cli-reference.md:310 · File type combined with upload action — agent may exfiltrate local data files
AST07